Some AWS resources, such as Lambda or CodeBuild, create their own log groups to CloudWatch Logs as they are being executed, however, they set them up with no log retention keeping all logs forever. This is sub-optimal as the old logs are not really relevant and storing them costs money.